Azure Log Integration with Application Gateway diagnostic logs - azure

Is there a way to integrate Azure Application Gateway logs to the Azure Log integration service. I can only see that Log integration seems to work for the VM logs, Security Center, Keyvault and Azure AD audit logs but nothing else.
How can we integrate other Azure cloud services(App gateway diagnostics etc.) with Azure Log Integration?

First, to answer the question about why you are don't see log integration for Application Gateway. Log Integration is only for resources like the VM, Security centre and other things you have mentioned. The Application Gateway is more like an appliance (like a tool that you use) rather than a service (that you consume). I think that is why they are separate and you are unable to mix them up.
I guess you have already seen this link about gateway diagnostics but I am putting it here anyway - https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics
Perhaps, it is possible for you to take the logs from the Log Integration and then the logs from the gateway and combine them in a web app of your own design.

Related

Is Sleuth tracing supported in Azure AKS?

I have an application that is going to provide tracing data with Spring Cloud Sleuth. I want to get this trace data to Azure Application Insights.
From Azure's documentation I understand that Sleuth traces are natively supported if I deploy my application to Azure Spring Cloud. However, the application is going to be running in Azure AKS instead. Is it still possible to view Sleuth trace data in the AKS version of Application Insights?
I don't have much experience with Azure (or cloud services in general), so apologies if the question is a bit silly :)
As per the doc Application monitoring:
By integrating Spring Cloud Sleuth with Azure's Application Insights, Azure provides powerful distributed tracing capability directly from the Azure portal.
This should work.

Is there a way for me to offload an App Service Plan to Log Analytics?

I wan to see logs of the nodes of my app service plan in Log Analytics. I DONT want to do it with app service. I need to query data of my nodes with KQL
Unfortunately, it's impossible as of now. Please vote up for this user voice: Request to manage diagnostic settings for App Service Plan from Azure portal.
I also tried from both azure portal and rest api:
From azure portal, there is no the option of Diagnostic settings for app service plan.
From api Diagnostic Settings - Create Or Update: It throws an error says that app service plan is not in the whitelist which means that it's not supported currently.
Hope Microsoft can implement this feature for service plan asap:).

How can i see log files for a WAF in Azure stored on a storage account

Whats the best way to see logs for application gateways in Azure, can I use the portal?
I need to see logs for a WAF and the rules triggered. Can someone advise the best way to do this?
you cannot really use portal for that, you can use Azure Storage Explorer or you can configure your logs to flow to Azure Monitor and view\search them there.
Here's how you would configure logs: https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics

How to display azure app service's web server log on Azure log Analytics?

I have an api application hosted on azure App services. For the web server log (iis logs) I've turned on web server logging from Azure portal. Look at the screenshot below.
For storing web server logging
Server Logs are allowed to be stored on the Azure blob containers only. As per the configuration the logs are stored on blob container as expected. Now I want to use these logs to be displayed on Azure Log Analytics.
I've the following storage configurations on Log Analytics in Azure Web portal.
On Log Analytics explorer I can view logs from all other sources except the web server (iis logs). What I'm missing here?
Verified with App Services team that Log Analytics is only supported at the IaaS (VM) level, not at PaaS (App Service) level.
Hopefully we can get this on their roadmap soon - for now you have to manually ingest this data into an external log management tool (Splunk, Sumo Logic, Azure Data Explorer).
Update 12/02/2019
Azure App Service has announced a Public Preview for IIS App Log integration with Azure Log Analytics.
Expanding on the prior answer, under the Diagnostic settings (preview) pane you can now integrate multiple logs to Azure via Add diagnostics setting, this can store:
AppServiceAntivirusScanAuditLogs
AppServiceHTTPLogs
AppServiceConsoleLogs
AppServiceAppLogs
AppServiceFileAuditLogs
AppServiceAuditLogs
AppServiceIPSecAuditLogs
AppServicePlatformLogs
AllMetrics
You can send them to:
Log Analytics workspace
Archive to storage account
Stream to event hub
Send to partner solution
Additionally, Application Insights is migrating to be backed by Log Analytics so we are getting close to fully integrated platform for metrics and logs

Configuring Azure Diagnostics for Azure Application Service (PaaS)

My setup: Existing WCF service project modified to run as Azure Application Service (PaaS).
Originally I used log4net for my info/error logging, but it is rather cumbersome to look at those logs via FTP or SCM console. After some research I came to a conclusion that Microsoft.WindowsAzure.Diagnostics is the recommended way to handle logging in Azure apps.
Question/problem: I can't find a guide, for my scenario, on how to enable WindowsAzure Diagnostics for Application Service that is NOT created as Web/Worker Role.
The closest I got is Set-AzureServiceDiagnosticsExtension cmdlet, but it requires Role as parameter...
Question/problem: I can't find a guide, for my scenario, on how to
enable WindowsAzure Diagnostics for Application Service that is NOT
created as Web/Worker Role.
You can't use Azure Diagnostics for your Azure Application Service. It is meant for Azure Cloud Service (Web/Worker Role) and Azure Virtual Machines.
For App Services diagnostics, please see this link: https://azure.microsoft.com/en-in/documentation/articles/web-sites-enable-diagnostic-log/.

Resources